Asia-Pacific organizations are putting more money into cybersecurity, but many still face a critical shortage of professionals who can turn training into practical protection.
Research cited by global cybersecurity company Kaspersky shows that 81% of organizations in the region have increased their IT security budgets. Yet 42% report significantly understaffed cybersecurity teams, while nearly half of hiring managers identify the mismatch between certifications and practical skills as their biggest recruitment challenge.
The findings point to a persistent problem: spending more on security and professional development does not automatically produce teams ready to handle evolving threats.
For employers, the challenge extends beyond filling vacancies. It means finding people who can apply what they know—and giving them opportunities to keep those skills current.
When credentials fall short
Certifications, online courses, bootcamps and university programs offer multiple routes into cybersecurity. But qualifications do not always tell employers how effectively candidates will perform on the job.
According to Kaspersky, 49.2% of APAC hiring managers cite the gap between certifications and practical ability as their single biggest hiring challenge.
That gap carries into onboarding. Some 71.4% say entry-level recruits need three to nine months before they can handle tasks independently. Of those surveyed, 42.3% put the adjustment period at three to six months, while 29.1% say it takes six to nine months.
These figures suggest employers must account for substantial development time even after recruitment, particularly when teams are already stretched.
Technical shortfalls remain pronounced. Kaspersky identified systems programming at 62%, framework knowledge at 61% and network technologies at 46% as leading hard skills gaps in APAC. Employers also reported weaknesses in analytical thinking, problem-solving and teamwork—abilities that help security professionals interpret threats and coordinate responses.
Skills fade without practice
Completing a course is only one part of building competence. Employees also need opportunities to use what they have learned.
In APAC, 48.1% of organizations report that staff tend to forget information security lessons without practical implementation. An equal share cite a shortage of courses covering new and challenging cybersecurity fields, while 38.1% say available programs are too theoretical.
Kaspersky’s broader research similarly identifies limited opportunities to apply lessons and gaps in emerging subject areas as obstacles to continuing professional development.
For organizations, the implication is clear: training needs to connect with actual responsibilities. Practical exercises, relevant tools and assessments of applied skills can help establish whether coursework translates into workplace capability.
Keeping talent requires room to grow
The development gap also threatens retention.
Among APAC cybersecurity professionals surveyed, 62.7% cite a lack of growth opportunities as a reason they would consider leaving their employer. Another 51% point to limited opportunities to work with the latest tools and technologies.
Organizations therefore face pressure on two fronts: preparing new recruits for independent work and keeping experienced employees engaged.
There is willingness to invest. A new Kaspersky global survey found that 78% of APAC organizations plan to strengthen their IT security function in the coming year, exceeding the global average of 75%. Vietnam leads the regional figures cited at 89%, followed by Indonesia at 85% and Malaysia at 82%.
Meanwhile, 44% of APAC cybersecurity professionals say they are willing to pay for upskilling themselves.
To help professionals choose a development direction, Kaspersky offers Cyber Pathways, a career orientation tool designed to match interests and aptitudes with information security specializations.
For employers and workers alike, the next challenge is making those investments count: choosing relevant training, applying new knowledge and measuring progress through demonstrated skills.
